Evaluable criteria

[Brent Putman]

On 6/1/15 7:16 PM, Cantor, Scott wrote:
> On 6/1/15, 11:12 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>
>> I forgot to comment earlier on that specific detail.  I don't know what 
>> is being envisioned here, but: doesn't anything involving use of SAML 
>> metadata fundamentally assume an entity identifier of some kind?
> Not necessarily on the wire. The common case is when you have to reverse 
> map from an endpoint, which is the case here.
>
>

Given we're envisioning a move from batch to dynamic metadata: Doesn't
dynamic imply that say an MDQ server (or similar) needs to index on
multiple properties of the metadata, and then be able to answer queries
accordingly?

I don't recall off-hand, but does the MDQ protocol spec really account
for this use case?  I remember it having a general notion of identifiers
in the query, but is it sufficiently flexible right now to support this,
e.g. query by endpoint (or a an endpoint-matching regex) and so on?

Otherwise I see Marvin's CAS stuff as well as SAML artifact, etc only
being supportable when the entity is in a metadata batch.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150601/98197493/attachment-0001.html>